SQL filter bypass leading to arbitrary write requests using "SQL Manager"

概要

参考情報

• PrestaShop/PrestaShop security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-30839 · ADVISORY
• PrestaShop/PrestaShop commit 0f2a9b7 · WEB
• PrestaShop/PrestaShop commit d1d27dc · WEB
• PrestaShop/PrestaShop · PACKAGE
• PrestaShop/PrestaShop release 1.7.8.9 · WEB
• PrestaShop/PrestaShop release 8.0.4 · WEB

prestashop/prestashop のその他の脆弱性

• CVE-2026-44212緊急 9.3PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerabilit…
• CVE-2026-33674中 5.3PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions…
• CVE-2026-33673中 5.4PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (st…
• CVE-2026-25597中 5.3PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in t…
• CVE-2025-51586低 3.7An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive in…